Edited summary from book.

Introduction -- Domain 1: Security and Risk Management (e.g., Security, Risk, Compliance, Law, Regulations, Business Continuity) -- Domain 2: Asset Security (Protecting Security of Assets) -- Domain 3: Security Engineering (Engineering and Management of Security) -- Domain 4: Communication and Network Security (Designing and Protecting Network Security) -- Domain 5: Identity and Access Management (Controlling Access and Managing Identity) -- Domain 6: Security Assessment and Testing (Designing, Performing, and Analyzing Security Testing) -- Domain 7: Security Operations (e.g., Foundational Concepts, Investigations, Incident Management, Disaster Recovery) -- Domain 8: Software Development Security (Understanding, Applying, and Enforcing Software Security) .